Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91109D7/3BD9D084A7E711F08D4DB010C4F9AE02/Vf7J4gez203tZS5JWDNvQ9nic5w.mft
File:                     Vf7J4gez203tZS5JWDNvQ9nic5w.mft (raw, json)
Hash identifier:          GtmO1PZh4dF14Zw3HyqQj+5Wa/hm3o+yFqoFJ14U27M=
Subject key identifier:   2E:E1:E2:1E:92:DA:07:5A:AD:3A:FB:B9:F6:E8:73:54:58:90:78:42
Authority key identifier: 55:FE:C9:E2:07:B3:DB:4D:ED:65:2E:49:58:33:6F:43:D9:E2:73:9C
Certificate issuer:       /CN=A91109D7/serialNumber=55FEC9E207B3DB4DED652E4958336F43D9E2739C
Certificate serial:       05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vf7J4gez203tZS5JWDNvQ9nic5w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91109D7/3BD9D084A7E711F08D4DB010C4F9AE02/Vf7J4gez203tZS5JWDNvQ9nic5w.mft
Manifest number:          05
Signing time:             Sun 19 Oct 2025 11:40:23 +0000
Manifest this update:     Sun 19 Oct 2025 11:40:22 +0000
Manifest next update:     Sun 26 Oct 2025 11:40:22 +0000
Files and hashes:         1: Vf7J4gez203tZS5JWDNvQ9nic5w.crl (hash: lOrXAmfc+Xd2vTbSYtcIWaUG0QGdtZYEooo54/BTyds=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91109D7/3BD9D084A7E711F08D4DB010C4F9AE02/Vf7J4gez203tZS5JWDNvQ9nic5w.crl
                          rsync://rpki.apnic.net/member_repository/A91109D7/3BD9D084A7E711F08D4DB010C4F9AE02/Vf7J4gez203tZS5JWDNvQ9nic5w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vf7J4gez203tZS5JWDNvQ9nic5w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 11:40:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91109D7, serialNumber=55FEC9E207B3DB4DED652E4958336F43D9E2739C
        Validity
            Not Before: Oct 19 11:40:22 2025 GMT
            Not After : Oct 26 11:40:22 2025 GMT
        Subject: CN=68f4ce27-e152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:70:c5:60:db:e9:8d:4c:1e:31:62:a7:09:cd:
                    68:1f:f3:fd:22:f5:39:a2:8c:d2:ea:e4:84:81:37:
                    a1:18:96:00:9d:05:4e:2c:64:1b:42:f3:c1:aa:59:
                    93:7e:69:4d:8d:09:79:ec:99:c2:9f:a5:84:e8:19:
                    4c:6c:be:16:c7:34:09:55:29:3f:3a:8c:1d:85:15:
                    14:72:48:cd:55:57:55:70:83:62:5a:05:c6:47:41:
                    2b:a6:ee:c1:18:38:96:b1:38:85:79:29:88:e2:46:
                    83:1d:61:df:3e:0d:b3:0a:1c:f9:00:65:07:9b:64:
                    b9:1d:11:05:c7:c6:32:9d:7d:4f:9d:5f:86:11:fc:
                    6e:40:3e:1a:e0:40:1d:de:29:7c:1e:81:75:9c:63:
                    03:5b:09:a4:92:fc:77:20:4e:03:fa:7f:96:c7:42:
                    32:0c:78:d9:11:d9:ef:c0:cf:89:e4:f1:10:44:40:
                    57:5e:8c:7a:c0:6c:b1:08:e1:78:72:fc:8b:90:85:
                    5b:4b:f4:5b:76:5f:5e:67:1d:19:6b:4c:d0:ca:9a:
                    be:fa:d9:66:66:29:be:6c:df:33:e4:32:8f:4c:99:
                    5b:19:90:8f:ab:eb:0e:7b:b5:f0:a1:62:b1:6e:e6:
                    de:c4:79:ec:4d:2d:78:b5:bd:ec:03:05:a1:4c:33:
                    64:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E1:E2:1E:92:DA:07:5A:AD:3A:FB:B9:F6:E8:73:54:58:90:78:42
            X509v3 Authority Key Identifier:
                keyid:55:FE:C9:E2:07:B3:DB:4D:ED:65:2E:49:58:33:6F:43:D9:E2:73:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91109D7/3BD9D084A7E711F08D4DB010C4F9AE02/Vf7J4gez203tZS5JWDNvQ9nic5w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vf7J4gez203tZS5JWDNvQ9nic5w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91109D7/3BD9D084A7E711F08D4DB010C4F9AE02/Vf7J4gez203tZS5JWDNvQ9nic5w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:3e:cc:e4:42:29:c5:d7:0b:33:0d:82:1b:74:0a:5d:86:50:
         d0:bc:26:bd:52:cb:c2:49:2c:02:5d:7d:f1:8c:70:92:d5:d1:
         d5:5f:fe:38:9d:da:05:88:bd:08:e3:48:8b:73:39:d3:81:08:
         82:25:08:05:72:40:92:c5:4d:33:73:97:36:89:51:0a:a2:03:
         ad:39:26:b0:7e:39:44:39:0c:a9:09:94:0d:83:22:b4:a9:58:
         04:f2:ee:0f:7b:61:0b:41:8b:ca:97:fa:88:e1:26:6f:4b:c6:
         d7:e4:b3:4a:73:fd:07:ff:5b:ad:ed:2c:5a:d5:e1:e2:57:94:
         08:1e:fe:b4:e9:7b:f3:1e:dc:10:47:af:b0:fe:66:37:d1:b9:
         b4:04:0b:a3:f0:28:f7:b5:46:e2:10:ca:62:73:2e:8e:c2:01:
         9d:dc:a3:a9:40:19:42:46:19:89:a7:7a:7f:09:16:22:57:9e:
         73:6f:de:7e:6d:ff:b3:7c:9a:18:c8:46:13:56:5a:f9:e6:07:
         d6:1d:c3:08:5a:6c:a6:28:cf:ba:24:ea:10:61:9b:51:63:14:
         5a:93:75:5a:31:ed:8e:c4:5d:6d:8b:4f:24:2a:f2:db:49:de:
         e3:8d:68:90:25:14:2e:29:ae:f1:ce:de:f0:e7:69:d8:64:62:
         76:56:32:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:16:20 2025 by rpki-client